Modern Workplace – Microsoft Endpoint Manager Senior Engineer & Architect

Summary

Avanade is seeking a senior Modern Workplace engineer and architect to help clients modernise, secure and transform endpoint and virtual desktop environments using Microsoft technologies. The role spans hands-on delivery, solution architecture, presales support, customer presentations and large-scale workplace transformation across enterprise, government and regulated industry clients. 

The role requires strong experience across Microsoft Intune, Microsoft Configuration Manager / SCCM, Windows 11, Windows Autopilot, Azure Virtual Desktop, Windows 365, Microsoft Entra ID, endpoint security, application deployment and supporting identity, network and security services. 

What you will do 

• Solution architecture and presales: Support solution shaping, discovery, estimation, proposal inputs, architecture narratives and customer presentations for endpoint management, virtual desktop and workplace transformation opportunities. 

• Endpoint management delivery: Design, implement and optimise Microsoft Intune, Configuration Manager / SCCM, Windows Autopilot, Windows 11 SOE, update management, compliance and endpoint security configurations. 

• Virtual desktop and Cloud PC: Design and support Azure Virtual Desktop and Windows 365 solutions, including image strategy, provisioning, user assignment, application delivery and operational considerations. 

• Transformation programs: Lead or support endpoint workstreams for large workplace programs, including mergers, acquisitions, divestments, tenant or domain change, device migration, coexistence and cutover planning. 

• Hybrid and cloud-only environments: Support clients moving from legacy, domain-joined, hybrid and co-managed environments to modern, cloud-managed and Microsoft Entra joined operating models. 

• Security and compliance: Implement endpoint security controls using Microsoft Defender for Endpoint, Intune endpoint security, Conditional Access, security baselines, BitLocker, application control and compliance policies. 

• Dependency management: Work across identity, network, cyber security, application, service desk and operations teams to understand and manage dependencies such as certificates, DNS, proxy, VPN / ZTNA, firewall rules and logging. 

• Documentation and handover: Produce architecture, build, migration, test, runbook and support documentation, and transition solutions into customer operations or managed services. 

.

Skills and experience 

• Strong hands-on experience with Microsoft Intune, Microsoft Configuration Manager / SCCM, Windows Autopilot, Windows 11 SOE, endpoint compliance, patching and device lifecycle management. 

• Experience with Azure Virtual Desktop and/or Windows 365, including image, provisioning, profile, application delivery and operational support patterns. 

• Strong understanding of Microsoft Entra ID, device identity states, Conditional Access, hybrid join, Microsoft Entra join, identity governance and access integration with endpoint security. 

• Experience with Microsoft Defender for Endpoint, endpoint security baselines, compliance policies, BitLocker, attack surface reduction, application control and endpoint monitoring. 

• Experience delivering workplace modernisation, Windows 11 rollout, VDI transition, endpoint migration, application deployment or cloud management adoption programs. 

• Ability to engage directly with customers, facilitate workshops, present recommendations and explain technical trade-offs to business, technical, security and executive stakeholders. 

• Ability to produce clear technical documentation, solution designs, migration plans, deployment playbooks, operational runbooks and transition artefacts. 

• Practical PowerShell and automation experience is highly desirable. 

Preferred qualifications and experience 

• Minimum 5+ years’ experience delivering modern endpoint management, Windows engineering, Intune, SCCM / MECM, virtual desktop, Windows 365, AVD, application packaging or endpoint security solutions. 

• Consulting or professional services experience with enterprise, government or regulated industry clients. 

• Exposure to managed services, operational support models and transition-to-run activities. 

• Microsoft Modern Workplace, Endpoint Administrator, Azure or Security certifications are desirable. 

• Australian Citizenship required due to client and project requirements; existing security clearance is highly regarded. 

About you 

• You are comfortable moving between architecture, hands-on engineering, presales and customer-facing consulting. 

• You can simplify complex endpoint, identity, network and security dependencies for mixed stakeholder groups. 

• You bring strong troubleshooting, documentation, delivery discipline and a pragmatic approach to customer outcomes. 

• You stay current with Microsoft Modern Workplace, endpoint management, AVD, Windows 365, Windows 11, identity and security roadmap capabilities. 

*Australian citizenship is required, and candidates must be eligible to obtain security clearance. (Existing security clearance is preferred but not mandatory)

.